[
https://issues.apache.org/jira/browse/KYLIN-1234?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15058118#comment-15058118
]
Shaofeng SHI commented on KYLIN-1234:
-------------------------------------
Could you set "kylin.query.security.enabled=true" in conf/kylin.properties,
restart Kylin server and try again? This property wasn't appeared in the
default config file, and its default value was "false" which means no security
check. I think it need be changed to true by default. Thanks for the reporting!
> Cube ACL does not work
> ----------------------
>
> Key: KYLIN-1234
> URL: https://issues.apache.org/jira/browse/KYLIN-1234
> Project: Kylin
> Issue Type: Bug
> Components: REST Service
> Affects Versions: v1.1
> Reporter: Marek Wiewiorka
> Assignee: Zhong,Jason
>
> Steps to reproduce the issue:
> 1)Create a user in the LDAP not assigning it to any group
> 2)User is not able to log in the Web UI - since it's not a member of any
> default group, nor a member of admin group.
> 3)User can however query any cube using REST api.
> ==
> I would expect that unless a user or group has CUBE_QUERY priv granted it
> should not be allowed to view the data.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)